{"id":"HSEC-2025-0001","summary":"Subword division operations may produce incorrect results","details":"# Subword division operations may produce incorrect results\n\nArithmetic operations may produce incorrect results when compiled with optimizations.\nFor the most part, this bug only causes availability and data integrity issues.\nHowever, in some circumstances, it may result in other, more complicated security related flaws, such as buffer overflow conditions.\n","modified":"2026-03-30T10:45:07.658152Z","published":"2025-11-14T14:45:34Z","database_specific":{"osvs":"https://raw.githubusercontent.com/haskell/security-advisories/refs/heads/generated/osv-export","repository":"https://github.com/haskell/security-advisories","home":"https://github.com/haskell/security-advisories"},"references":[{"type":"REPORT","url":"https://gitlab.haskell.org/ghc/ghc/-/issues/25653"},{"type":"REPORT","url":"https://discourse.haskell.org/t/psa-correctness-issue-in-ghc-9-12/11204"},{"type":"REPORT","url":"https://discourse.haskell.org/t/critical-code-generation-bug-with-ghc-9-12-3/13505/2"},{"type":"FIX","url":"https://gitlab.haskell.org/ghc/ghc/-/merge_requests/13820"},{"type":"REPORT","url":"https://gitlab.haskell.org/ghc/ghc/-/issues/26711"},{"type":"REPORT","url":"https://gitlab.haskell.org/ghc/ghc/-/issues/26668"}],"affected":[{"package":{"name":"ghc","ecosystem":"GHC"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.12.1"},{"fixed":"9.12.2"},{"introduced":"9.12.3"},{"fixed":"9.12.4"}]}],"database_specific":{"human_link":"https://github.com/haskell/security-advisories/tree/main/advisories/published/2025/HSEC-2025-0001.md","source":"https://github.com/haskell/security-advisories/blob/generated/osv-export/2025/HSEC-2025-0001.json","osv":"https://raw.githubusercontent.com/haskell/security-advisories/refs/heads/generated/osv-export/2025/HSEC-2025-0001.json"},"severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H"}]}],"schema_version":"1.7.5"}